TÜV SÜD certifies Siemens process control system according to IEC 62443

TÜV SÜD has certified Simatic PCS7, the Siemens process control system, according to the IEC 62443 standard as the first product worldwide to receive this certification. The certificate confirms that the product is in conformity with the IEC 62443-4-1 and IEC 62443-3-3 security standards. Simatic PCS 7 is a process control system that controls and monitors continuous manufacturing processes. It must fulfil high demands in the fields of functional safety and industrial IT security.

“For the first time, the international standard IEC 62443 now provides a basis for IT security certification in industrial automation and control systems”, says Dr Kai Wollenweber, Industrial IT Security expert at TÜV SÜD. The series of standards imposes rigorous requirements on the IT security of plants/systems, system integrators/servicing companies and manufacturers of components, sub-systems and systems. Certification of product manufacturers is carried out on the basis of IEC 62443-4-1, while security functions of the products are evaluated according to IEC 62443-3-3. System integrator certification is based on IEC 62443-2-4 and the security functions of the systems are evaluated according to IEC 62443-3-3.

First product certificate worldwideSiemens is the first company to receive a TÜV SÜD Security Cer­tificate for a product based on IEC 62443-4-1 and IEC 62443-3-3. In August 2016, TÜV SÜD successfully completed the certification of the general design and development process according to IEC 62443-4-1 for products for automation and drive systems, including the industrial software, at seven Siemens design and development locations in Germany.

The product certification according to IEC 62443-4-1 and 62443-3-3 provides confirmation by TÜV SÜD's experts that the development and maintenance of the Simatic PCS 7 process control system are in conformity with the requirements. TÜV SÜD also assessed the implemented security functions based on the requirements specified in IEC 62443-3-3. Regular periodic audits will ensure that Simatic PCS 7 continues to fulfil the required standards and concepts in the future. By gaining certification based on IEC 62443, Siemens documents its security approach to automation products, offering integrators and operators transparent insight into industrial security measures.

The Siemens process control system Simatic PCS 7 controls and monitors continuous manufacturing processes – from chemical and cement plants through the water and waste-water sector to the pharmaceutical industry. As plant downtime can have major consequences in these sectors, both functional safety and industrial IT security are extremely important. Simatic PCS 7 offers a wide variety of industrial IT security functions which ensure the security of plant operations and aim at preventing plant failure and extensive downtime.

Further information about certification according to the international IEC 62443 standard is available at: